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5,958,052 

Claim Rejections -35 USC §102 

1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

2. Claims 1-5 & 7-8 are rejected under 35 U.S.C. 102(B) as being anticipated by Bellovin 
(U.S. Patent No.: 5,958,052). 

Referring to claim 1, Bellovin teaches: a gateway as a node of a local network and a wide area 
network (The combination of Firewall, DNS proxy, Resolver, and Internal DNS (not shown) per 
Fig 10 are the gateway and is a node which is connected to Device (102 or 104 per Fig 1) via 
LAN and Firewall is connected to the Internet or WAN per col. 3 line 19 to col. 9 line 29) 
comprising: 

Command processing means for processing a first command according to a first network 
protocol which is used in said local network (The DNS Proxy receives a query request for 
external network IP address based upon a request for the Domain name. The first query request 
contains the inherent IP source address and LAN address of the 102 or 104 per Fig 1 or a first 
network protocol per col. 3 line 19 to col. 9 line 29) 

Network configuration storing means for storing gateway specified information for specifying 
another gateway connected via said wide area network (The combination of Firewall, DNS 
proxy, Resolver, and Internal DNS (not shown) per Fig 10 store IP address of the external DNS 
server per col. 3 line 19 to col. 9 line 29) 

Second command processing means for processing a second command according to the second 
network protocol which is used in said wide area network and executing protocol conversion 
between said first network protocol and said second network protocol (The DNS Proxy receives 
the response with the IP address of the external DNS in response to first query request which was 
filtered of all private internal network information) and executing protocol conversion between 
said first network protocol and said second network protocol (The first protocol request has all of 
the private internal information and the second network protocol has all of the private 
information about the external network. The proxy filters the information and translates the 
private information or performs protocol conversion per col. 3 line 19 to col. 9 line 29) 
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Thereby controlling permission or inhibition of the communication on the basis of the gateway 
specifying information stored in said network configuration storing means (All private network 
information is inhibited from passing from the internal to the external network to the devices 104 
or 104 per Fig land all private network information is inhibited from passing from the external 
network to the internal network devices 102 or 104 per Fig 1. Pointers to external DNS are stored 
in the internal DNS with internal pointer provided to the devices 102 or 104 per Fig 1) 

In Addition Bellovin teaches: 

Regarding claim 2, further comprising accompanying information storing means for storing 
device specifying information for specifying a network device connected to a local network of 
said another gateway (The IP address associated with the domain name associated with another 
device on an inherent local network is stored in the table per col. 3 line 19 to col. 9 line 29) 

Thereby controlling the permission or inhibition of the communication on the basis of the device 
specifying information store is said accompanying information storing means (All private 
network information is inhibited from passing from the internal to the external network to the 
devices 104 or 104 per Fig land all private network information is inhibited from passing from 
the external network to the internal network devices 102 or 104 per Fig 1. Pointers to external 
DNS are stored in the internal DNS with internal pointer provided to the devices 102 or 104 per 
Fig 1 per col. 3 line 19 to col. 9 line 29)' 

Regarding claim 3, wherein said gateway specifying information is at least one of a global IP 
address, a domain name, and information for using encrypted communication (query for IP 
address which is inherently a global IP address associated with a domain name per col. 3 line 19 
to col. 9 line 29) 

Regarding claim 4, wherein said gateway specifying information is an IP address different form 
a global IP address related to a domain name system DNS server (The internal DNS has an 
inherent internal IP address which is not a global IP address per col. 3 line 19 to col. 9 line 29) 

Regarding claim 5, wherein when a first command to search said whole network is received a 
second search command is transmitted to said another gateway specified by said gateway 
specifying information (When a first query with request for a domain name associated with an 
external network then a 2 nd query which has filtered out all of the internal network information 
into a second command which is transmitted to a second DNS with an external network address 
per col. 3 line 19 to col. 9 line 29) 

Referring to claim 7, Bellovin teaches: a communicating method in a gateway as anode of a local 
network and a wide area network (The combination of Firewall, DNS proxy , Resolver, and 
Internal DNS (not shown) per Fig 10 are the gateway and is a node which is connected to 
Device (102 or 104 per Fig 1) via LAN and Firewall is connected to the Internet or WAN which 
performs the method) comprising: 
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A receiving step of receiving a first command according to a first network protocol which is used 
in said local network (The DNS Proxy receives a query request for external network EP address 
based upon a request for the Domain name. The first query request contains the inherent IP 
source address and LAN address of the 102 or 104 per Fig 1 which has internal network 
parameters or first protocol) 

A converting step of converting the first command received in said receiving step int a second 
command according to a second network protocol which is used in said wide are network 
(The DNS proxy server receives a first request or command with all of the private internal 
network information or first protocol and converts the information to a second command which 
inherently has the proxy server address and with all of the private internal network information 
removed or second protocol ) 

A communication control step of controlling permission or inhibition of communication on the 
basis of gateway specifying information for specifying another gateway connected via the s wide 
area network (The proxy gateway inhibits all private network information from passing from 
the internal to the external network to the devices 104 or 104 per Fig land all private network 
information from passing from the external network to the internal network devices 102 or 104 
per Fig 1. Pointers to external DNS are stored in the internal DNS with internal pointer provided 
to the devices 102 or 104 per Fig 1) 

Referring to claim 8, Bellovin teaches: a communicating method in a gateway as anode of a local 
network and a wide area network (The combination of Firewall, DNS proxy , Resolver, and 
Internal DNS (not shown) per Fig 10 are the gateway and is a node which is connected to 
Device (102 or 104 per Fig 1) via LAN and Firewall is connected to the Internet or WAN which 
performs the method) comprising: 

A first command according to a first network protocol which is used in said local network (The 
DNS Proxy receives a query request for external network IP address based upon a request for the 
Domain name or first command. The first query request contains the internal network 
information of 102 or 104 per Fig 1 . The DNS proxy server filters out all of the internal network 
parameters in order to create a second command which is transmitted over the wide area 
network) 

A receiving step of receiving the second command transmitted, from said wide area network (The 
DNS proxy server receives the response for the query associated with the second command 
transmitted from the wide area network and has external network parameters. The DNX proxy 
filter out all of the external network parameters and inserts internal network parameters in 
response to the first request or command.) 

A communication control step of controlling permission or inhibition of communication on the 
basis of the device specifying information for specifying a network device connected to said 
local network of said gateway (The proxy gateway inhibits all private network information from 
passing from the internal to the external network to the devices 104 or 104 per Fig 1 and all 
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private network information from passing from the external network to the internal network 
devices 102 or 104 per Fig 1. Pointers to external DNS are stored in the internal DNS with 
internal pointer provided to the devices 102 or 104 per Fig 1) 



Claim Rejections - 35 USC §103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 1 02 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claim 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Bellovin (U.S. 
Patent No.: 5,958,052). 

Referring to claim 6, Bellovin teaches: the gateway according to claim 1, 

Bellovin does not expressly call for: wherein a second search command transmitted from said 
another gateway specified by said gateway specifying information a received, a first command to 
search said whole local network of said gateway is transmitted 

Bellovin teaches: a domain name service query and filtering of all external network information 
when receiving a second command from an outside network per col. 3 line 19 to col. 9 line 29. 

It would have been obvious to one of ordinary skill in the art at the time of the invention that the 
external network would send a request for an IP address associated with the domain of internal 
network (local network) and the second command would be filtered into the form of information 
of the first command and would be used to search the whole local (internal network) 

Conclusion 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Robert W. Wilson whose telephone number is 571/272-3075. 
The examiner can normally be reached on M-F (8:00-4:30). 



« 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Huy D. VU can be reached on 571/272-73 1 55. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Robert W Wilson 
Examiner 
Art Unit 2616 

RWW 
4/10/07 



